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Abstract. We give a simple order-theoretic construction of a Cartesian closed category of 
sequential functions. It is based on bistable biorders, which are sets with a partial order — 
the extensional order — and a bistable coherence, which captures equivalence of program 
behaviour, up to permutation of top (error) and bottom (divergence). We show that 
monotone and bistable functions (which are required to preserve bistably bounded meets 
and joins) are strongly sequential, and use this fact to prove universality results for the 
bistable biorder semantics of the simply- typed lambda-calculus (with atomic constants), 
and an extension with arithmetic and recursion. 

We also construct a bistable model of SPCF, a higher-order functional programming 
language with non-local control. We use our universality result for the lambda-calculus to 
show that the semantics of SPCF is fully abstract. We then establish a direct correspon- 
dence between bistable functions and sequential algorithms by showing that sequential 
data structures give rise to bistable biorders, and that each bistable function between such 
biorders is computed by a sequential algorithm. 



Since its inception, domain theory has been a dominant paradigm in denotational se- 
mantics; it is a natural and mathematically rich theory with broad applicability across a 
wide range of phenomena. However, a limitation of domain theory has been its failure 
to capture the intensional aspects of computation. The observation of Plotkin [28], that 
the continuous functional model of PCF is not fully abstract, because it contains functions 
which are not sequential, is symptomatic, but the problem cuts deeper; in the presence of 
computational effects such as state or concurrency, intensional properties such as the order 
of computation become critical, and must be captured by some means in any sound model. 

Thus, a longstanding problem in domain theory, and the subject of a significant amount 
of research [21 [121 HI [5] , nas been to find a simple characterization of higher-order sequential 
functions which is wholly extensional in character. Typically, what is sought is some form of 
mathematical structure, such that all set-theoretic functions which preserve this structure 
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are sequential and can be used to construct a Cartesian closed category; the basis for a 
"sequential domain theory". 

Clearly, any solution to this problem is dependent on what one means by sequential. It 
has been closely associated with the full abstraction problem for PCF, although it is now 
known that PCF sequentiality cannot be characterized effectively in this sense \12\ I22j. 

Another notion of sequentiality — the observably sequential functionals — was discov- 
ered by Cartwright and Felleisen [Bj. They observed that if one or more errors are added 
to a functional language, then the order of evaluation of programs becomes observable by 
varying their inputs. Thus each function corresponds to a unique evaluation tree or sequen- 
tial algorithm [7J, which can be reconstructed from its graph. The observably sequential 
functionals do form a cartesian closed category, which contains a fully abstract model of 
SPCF — PCF with errors and a simple control operator. However, the definitions of ob- 
servably sequential functions and sequential algorithms are based implicitly or explicitly on 
intensional notions of sequentiality, and hence they cannot offer a characterization of it in 
the above sense. So we may refine our original problem to ask whether there is a simple, 
order-theoretic characterization of observable sequentiality. 

This paper suggests such a characterization. We will construct a cartesian closed cat- 
egory of biordered sets and order-preserving "bistable" functions. We prove that bistable 
functions correspond to the observably sequential functions both indirectly — by showing 
that they may used to give models of observably sequential languages which are universal 
(every element is the denotation of a term) and fully abstract — and directly, by showing 
that each sequential data structure yields a bistable biorder, and that every bistable and 
continuous function between such orders is "realized" by a sequential algorithm. 

Bistable biorders are analogous to Berry's bidomains [21 [3], which combine the exten- 
sional order with the stable order. Although the bidomain model of PCF is not sequential, 
even at first order types, the bidomain model of unary PCF (which contains a T element at 
each type) is sequential, and universal [T5J, [18] . The connection with observably sequential 
functions is made by viewing top as an error element. Under this interpretation, the mono- 
tone and stable functions on bidomains are not observably sequential, because they are not 
"error-propagating" (i.e. sequential with respect to T as well as _!_). However, the duality 
between _L and T suggests that we "symmetrize" the stable order, to obtain a notion of 
bistable order. 

Bistable coherence may be thought of as "behavioural equivalence up to the point of 
failure — i.e. we may say that M and N are in the bistable order if they are in the 
extensional order, and M and N perform the same computation-steps. M and N are 
coherent if they behave in a way except that M may diverge where N raises an error, or 
vice- versa 

Bistable functions are required to preserve the bistable order, and bistably bounded 
meets and joins. The proof that bistable functions are sequential is surprisingly simple. 
Informally, if we have a function which may evaluate two of its components in parallel, 
we may consider two arguments which are identical except that one diverges in the first 
component, and produces T in the second, and the other produces T in the first argument 
and diverges in the second. These arguments are bounded in the bistable order: their meet 
diverges in both components. Our function will produce an error when applied to either 
argument, but will diverge when applied to their meet, and hence it cannot be bistable. 
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1.1. Related Work. The notion of bistable biorder which is elaborated here was first 
presented (in a slightly different form) in p3], together with a (different) proof of full 
abstraction for a model of SPCF. Curien [9], Streicher [30] and Low [32] have studied 
bistable functionals, and proved versions of some of the results described here (such as the 
correspondence between sequential algorithms and bistable functions in [9l|32]). The use 
of definable retractions to prove definability and full abstraction for observably sequential 
languages originates with Longley [23\ 124] . The concluding section of this paper gives 
references to more recent work on bidomain models of sequential languages. 

1.2. Outline of the Paper. In Section 2, we describe the notion of bistable biorder and 
bistable function, and prove that it yields a Cartesian closed category. We prove that this 
contains a universal model of the simply-typed A-calculus A J over a single atomic type 
containing two constants (T and _L), equivalent to the "minimal model" of A J [26J. In 
Section 3, we develop a notion of complete bistable biorder, or bistable bicpo, and show 
that we may define a CCC of bicpos and continuous and bistable functions. We give a 
semantics of SPCF in this category, and prove that it is fully abstract. In section 4 we 
describe a universal model of a A-calculus extending A J with arithmetic operations and 
recursion, which may be viewed as a target language for CPS interpretation of observably 
sequential languages such as SPCF. In Section 5, we investigate the correspondence between 
sequential algorithms on sequential data structures and bistable functions, showing that 
each of the latter gives rise to a bistable bicpo, and that each sequential algorithm on the 
"function-space" computes a bistable function. We then prove that every bistable function is 
computed in this way, and hence that there is a full embedding of the category of sequential 
data structures and sequential algorithms in the category of bistable bicpos and bistable 
and continuous functions. 

2. Bistable Biorders 

Definition 2.1. A bistable biorder is a tuple (D,< E ,l), where (D, < E ) is a partial order 
(the extensional order), and J is an equivalence relation (bistable coherence) on D such that 
each J-equivalence class is a distributive lattice with respect to < E , and inclusion into D 
preserves meets and joins. 

Bistable biorders were introduced in [14] as biordered sets (hence the name). In par- 
ticular, we may define a bistable biorder to be a tuple (D,< E ,< B ), where (D,< E ) and 
(D,< B ) are partial orders such that: 

• a and b are are bounded above in < B if and only if they are bounded below in < B . 

• If a and b are bounded above in < B then there are elements aAb,a\/b£D which are 
(respectively) the greatest lower bound and least upper bound of a and b with respect to 
both orders. 

• If {a, b, c] is bounded above in < B , then a V (b A c) = (a V b) A (a V c) (and so a A (6 V c) = 
(a Vfc) A (a Vc). 

Proposition 2.2. The definitions of bistable biorder are equivalent. 

Proof. From the bistable order, we may define the bistable coherence relation: a J b if a 
and b are bounded above in (D, < B ). This is an equivalence relation, since if f,g < B p and 
g, h < B q, then g < B p, q and hence p, q are bounded above and thus / \h. 
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From the bistable coherence relation, we may define the bistable order x < B y if x \ y 
and x < E y. □ 

We shall now construct a Cartesian closed category of bistable biorders and monotone 
and bistable functions. 

Definition 2.3. A function / : D — > E is monotone if for all x,y € \D\, x < E y implies 
f(x) < E f(y) and bistable if for each x, /t[x]j is a lattice homomorphism into [/(x)]j 

- i.e. for all x,y € \D\ such that x % y, f(x) J /(y), /(x Ay) = f(x) A /(y) and 
/(xVy) = /(x)V/(y). 

We define a category in which objects are bistable biorders and morphisms are 

monotone and bistable functions. 

Lemma 2.4. BBO is bi- Cartesian. 

Proof. The product and co-product operations on bistable orders are defined directly (point- 
wise) : 

. AxB = (\A\ x \B\,< E x <%\ A x \ B ), 

• A + B = (\A\ + \B\, < E A + <f , U + Ib)- 

The unit for the product is the one-point biorder, 1 and the unit for the co-product is the 
empty biorder. □ 

We will now show that BBO is Cartesian closed by defining an exponential: a bistable 
biorder of functions, in which the extensional order is standard, and the bistable order is a 
symmetric version of the stable order. 

Definition 2.5. Given bistable biorders D, E, we define the function-space D E to be 
the set of monotone and bistable functions from D to E, with 

• / < E g if for all x € D, f(x) < E g(x), 

• f I g if for all x G D f(x) J g(x), and if x I y (and hence f(y) J g{x)) then f(x) A g(y) = 
f(y) A g(x) an d f(x) V g(y) = /(y) V y(x). 

Lemma 2.6. D E is a bistable biorder. 

Proof. If / | y then /(a) | g(a) for all a, and so we may define < E meets and joins /Ay 
and / V g pointwise: 

(/ A g){a) = f(a) A g(a) and (/ V y)(a) = f(a) V y(a). 

We now show that /Ay and / V y are monotone and bistable functions — e.g. if a J 6 
then (/ A y)(a V 6) = (/ A y)(a) V (/ A y)(6). Observe that /(a) A y(6) = y(a) A /(&) < B 
/(a), f(b),g(a),g(b) and so /(a) A y(6), /(6) A y(a) < £ /(a) A /(6), y(a) A y(6). Hence: 
(/ A y)(a V 6) = /(a V 6) A y(a V b) = (/(a) V /(&)) A (y(a) V y(6)) = (/(a) A y(a)) V (/(a) V 
g(b)) V (/(6) A y(a)) V (/(6) A y(6)) = (/(a) A y(a)) V (/(&) A y(6)) = (/ A y)(a) V (/ A g)(b). 

Next, we show that / \ f A y and / J / V y: 
For all x, /(x) J (/ Ay)(x) = f(x)Ag(x), and for all y such that x | y, /(x) A (/ Ay)(y) = 
/(a) A /(y) A y(y) = /(y) A /(x) A y(x) = /(y) A (/ A y)(x) and 

/(x) V (/ A y)(y) = /(x) V (/(y) A y(y)) = (/(x) V /(y)) A (/(x) V y(y)) = (/(y) V /(x)) A 
(/(y)Vy(x)) = /(y)V(/Ay)(x). 

Finally, we need to prove that | is transitive, for example, suppose / J y and g X h. 
Suppose x | y. Then: 

/(x) A %) = /(x) A h(y) A (/(x) V y(y)) = f(x) A ^(y) A (/(y) V y(x)) 
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= (/(x) A h(y) A f(y)) V (f(x) A h(y) A g{x)) 

< E f(y) V (f(x) A g(y) A /»(x)) = /(y) V (f(y) A g(x) A h{x)) = f(y). 

Similarly, f(x) A h(y) C /i(x), /(y) A /i(x) C /(y) and /(y) A /i(x) C /i(x). So /(x) A /i(y) = 
/(y) A /i(x). By duality, /(x) V /i(y) = /(y) V h(x) and so / | h as required. □ 

Proposition 2.7. (BBO,l, x) is cartesian closed. 

Proof. We need to show that the natural bijection taking / : A x B — > C to A(/) : A — > 
(.B =>■ C) such that A(/)(a)(fe) = /((a, 6)), and its inverse, are well-defined on bistable 
biorders and bistable functions. This is similar to the proof for (stable) biorders and stable 
and monotone functions [3]. 

For example, to show that A(/) preserves bistable coherence: 
Suppose a \ A a 1 . Then for all b \ B b', (a,b) J (a',bf), and e.g. A(/)(o)(6) A A(f)(a')(b') = 
f((a, b) A (a', b')) = f((a, b')) A f((a', b)) = A(/) (a) (b') A A(/) (a') (b). Similarly, A(/)(a)(6) V 
A(/)(a')(fo') = A(/)(a)(6') VA(/)(a')(6) and hence A(/)(a) I A(/)(6') as required. 

Conversely, to show that if g : A —> (B C) is bistable, then A 1 (g) is bistable, suppose 
{a,b) XaxB W,b'). Then a \ a! and 6 | 6' and by bistability of g, g(a)(b) A g(a')(b') = 
g(a)(b') A y(a')(6) and g(a)(b) V ff(a')(&') = g(a)(b') V g(a')(6). So e.g. A- 1 (y)((a,6) A 
(a', 6')) = g(a A o')(6 A 6') = g(a)(b) A y(a)(6') A g(a')(b) A g(a')(b') = g(a)(b) A g(a')(b') = 
A- 1 ( 5 )((a,6)) AA- 1 (y)((a',6'))- □ 

A bistable biorder D is pointed if (-D, < s ) has a least element _L and a greatest element 
T, such that 1 | T. A monotone bistable function / of pointed biorders is bistrict if it 
preserves the meet and join of the empty set — i.e. /(T) = T and /(-L) = A. We define the 
category BBO s of pointed bistable biorders and strict, monotone and bistable functions. 

Proposition 2.8. The inclusion of BBO s into BBO has a left adjoint. 

Proof. The bilifting operation takes a bistable biorder A to a pointed bistable biorder by 
adding two new points, T and _L: A~\_ = (A x {*}) U {_L, T}, where: 

• x < E y if x = _L or y = T, or x = (x', *), y = (y', *) and x' < E y', 

• x | y if x, y G {_L, T} or x = (x', *), y = (y', *) and x' J y'. 

For any pointed B, BBO(A, B) ££0 S (A[, 5). □ 



2.1. First-Order Sequentiality and Universality. A key step in proving universality for 
observably sequential languages is the observation that the monotone and bistable functions 
on pointed bistable biorders are bisequential (i.e. sequential with respect to both _L and T 
elements). 

Definition 2.9. Given pointed bistable biorders A±, . . . , A n , B, a function / : A± X . . . X 
A n — > B is i-strict if 7Tj(x) = _L implies f(x) = _L and 7Tj(x) = T implies f(x) = T. 

Lemma 2.10. Given pointed bistable biorders A±, . . . ,A n; every strict, monotone and 
bistable function f : A± X . . . X A n — > X is i-strict for some i < n. 

Proof. Given j < n, let -L[T]j = (xj | i < n), where Xj = T if i = j, and Xj = _L otherwise. 
Similarly T[_L]j = (xi \ i < n) , where Xj = _L if i = j, and Xj = T otherwise. 

If iTi(x) = A then x < E T[_L]j, and if 7Tj(x) = T, -L[T]j < E x. Thus / is i-strict if 
/(T[_L]j) = _L and /(_L[T]j) = T. Since _L < B T, we have T[_L]j I T[±] k for all j,k < n, 
and Ai<nT[-l]i = A. Hence Ai<„/(T[±],-) = /(Ai<„T[JL] f ) = f(±) = A, and so for some 
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i, /(T[_L]j) = _L. Similarly f(\J ieI (±[T]i)) = T, and so /(_L[T]j) = T for some j. Moreover, 
if i 7^ j, then -L[T]j < E T[_L]j, and so either -L[T]j = T[_L]j — in which case each is 
the one-point order — or else i = j as required, and hence % is unique — i.e. bisequential 
functions are strongly sequential. □ 



2.2. Universality for Aj. Let Aj be the simply-typed A-calculus with products, over 
a single base type £ containing the constants T and _L. The "minimal" model of this 
language (that is, the model inducing the maximal consistent theory containing (3 and 77) 
was shown to be effectively presentable by Padovani [26] using an analysis of the syntax. 
By Cartesian closure of BBO, we obtain a model of Aj in which each type is interpreted as 
the corresponding bistable biorder. We will show that this is the minimal model. 

For each type S of Aj, an element of the corresponding biorder is definable if it is the 
denotation of a closed term of type S. Universality holds at S if every element of S is 
definable. Universality at first-order function types is a consequence of sequentiality. 

Lemma 2.11. The bistable model of Aj is universal at all types of the form S n =4* S m . 

Proof. Suppose m = 1. If / is constant (T or _L), then / is definable. Otherwise, / is strict, 
and hence for some i, f is i-strict — i.e. / = 7Tj, and is therefore definable. If m > 1, we 
have / = (/; 7Tj I i < m), and /; 7Tj is definable for each % and so / is definable. 

□ 

We will now prove that universality at higher-order types reduces to universality at 
first-order, using the notion of definable retraction. 

Definition 2.12. Given types S, T, a definable retraction from S to T (which we may write 
inj : S < T : proj or just S <! T) is a pair of terms: inj : S T and proj : T S which 
denote a retraction in BBO (i.e. [inj]; [proj] = ids). 

Lemma 2.13. If universality holds at type T, and inj : S <T : proj, then universality holds 
at type S. 

Proof. Given an element e G S, we have a term M : T such that [M] = e; inj and thus 
[proj M] = e; inj; proj = e. □ 

So we can prove universality for Aj by showing that every Aj type is a definable retract 
of a first order type. To do so, we require a few simple facts about definable retractions. 

Lemma 2.14. // inj r : T\ < T2 : proj T , and inj 5 : Si < S*2 '■ projg, i/ien Si =>■ T\ < S2 =>■ ?2 

and Si x Ti < S 2 x T 2 . 

Proof. We have, for example, A/x.inj T (/ (proj 5 x) : Si =^> Ti<S 2 =>■ T 2 : A/x.proj T (/ (\n] s x)). 

□ 

The key to reducing the order of the function-space is the fact that for any n, (S n =>■ 
S) ^> S is a definable retract of (S => S) x S n . 

Lemma 2.15. /// : (S n =4> S) — > S is a strict bistable function, then for all e € S" => E, 

fe = e{fwi I 1 < i < n) . 

Proof. If e = T then / e = T by strictness of /, and e (/(vrj) | 1 < i < n) = T. Similarly, 
if e = _L then / e = e (/ 7Tj | 1 < i < n) = _L. Otherwise, e = 7Tj for some 1 < i < n, and 
e (/ 7Tj j 1 < i < n) = / 7Tj = / e as required. □ 
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Lemma 2.16. Let g = Xx.Xy.(x Xz.(y (xiTi \ l<i< Then g = id(2"^E)=>s 

Proof. We show that for any element / 6 (E n =4> E) => E, g(/) = /. We first note that 
5 (T) = T and = i_. 

If / / T and f ^ ±, then / is strict (since f(±) < E /(T)). Given e£S n ^E, suppose 
/(e) = T, then (g f)(e) = f(Xz.(e (f n | 1 < i < n))) = f (Xz.f(e)) = f(Xz.T) = T = /(e), 
by Lemma 12.151 and strictness of /, and similarly if /(e) = _!_, then (g /)(e) = _L. Hence 
9(f) = / as required. □ 

Lemma 2.17. For any n > 1, (E n E) E is a definable retract of (E => E) x S" in 

Proof. Consider the terms 

inj : ((X" => E) S) ((E => S) x S J ) = Xf.{Xx.(f Xy.x), (/ tt< | 1 < i < n» 
proj : ((E E) x E n ) => (E n => E) S = Az.Ap.(7Ti(z) (g n 2 (x))) 

We have Ax. proj (inj x) =p n Xx.Xy.x Xz.y (xtti | 1 < i < n), and hence by Lemma [2.161 
[Ax. proj (inj x)] = id (s „^ E) ^ E . □ 

Lemma 2.18. For anyn,m > 1, (E n => E m ) =>- E is a definable retract o/E n+m =>- £( 2n ) m . 

Proof. By induction on m. For the base case (m = 1), we have (E n => E) => E < (E =>■ 
E) x E n by LemmaEHl and since E => E<E n + l => E, and E<E ra =>• E, so E n <(E =>• E) n , 
we have (E n =4> S m ) => E < ((E n+1 =4> E) n ) 2 ^ ((E n+1 => E) 2n "\ For the induction case, 
(S n => E m+1 ) =► S ^ (E n =4> S m ) => ((E n => E) =^> E) 
<(E n E m ) =4> ((E E) x E n ) by Lemma ETfl 
^ (E => (E n E m ) => E) x ((E n =4> E m ) => E) n 

<(£ =4> (S n+m S( 2n ) m )) x (S n+m => S( 2n ) m ) n by induction hypothesis 

^^yjn+m+l yj(2n) m "jn ^ _^ yj(2n) m "jn 

^ s (2n)™-2n ^ vjn+m+1 ^ S (2n)-+ 1 ag require d. □ 

Lemma 2.19. For any type T there exists n(T),m(T) £ N such that T is a definable retract 
/£*(r) => E m ( T ). 

Proof, is by induction on type structure. For the induction cases: 5 x T < (E™^) =>■ 
£ m (S)) x (£™( T ) £™( r )) < s max { n ( 5 )' n ( T )> £w(S)+m(X)_ 
5 => T < (E n ( 5 ) => E m ( s )) => (E n ( T ) => £ m ( T )) 

(Vjn(T) ^ (Yjn(S) ^ Yjm(S)) ^ £)m(T) 
< ( S n(T) ^ (- E n(5)+m(S) ^ yj(2n(5)) m ( s ) )m(T) 

^ yjn(r)+n(S)+m(S) _^ yj(2n(5)) m ( s > -m(T) |— | 

By applying Lemma 12.131 to Lemmas 12.111 and 12.191 we have established: 
Theorem 2.20. The bistable model of Aj is universal at all types. 
Corollary 2.21. The bistable model is minimal. 

Proof. It is straightfoward to use universality to show that if [M] ^ \N\, then there is an 
(applicative) context such that C[M] =p vn T and C[N] =p vn _L, or vice- versa. Hence any 
compatible theory containing ftnir as well as M = N also contains _L = T. O 



1 Here we are using A-calculus notation to describe an element of BBO. 
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Our proof also yields a solution to a related problem: to give a simple axiomatization 
of the theory of the minimal model. 

Definition 2.22. Let the theory =J_ over the terms of A J be the compatible, symmetric 
and transitive closure of /3ry7r-equivalence extended with the axioms / : (S n =4> S) =>- £ = 
Xh.f Xx.h (f 7Tj | 1 < i < n) for each n. 

For each type T, we have a definable retraction inj T : T < £ n ( T ) =4> £ m ( T ) : proj T . 

Lemma 2.23. proj T (inj r x) =]_ Xx.x. 

Proof. This is by induction on T, following the definition of proj r and inj T , since to prove 
that they define a retraction in BBO, we used only standard properties of all CCCs (i.e. 
/Jr/Tr-equivalence) together with (S n =>- S) S < (S S) x S n . □ 

Proposition 2.24. M : T =\ N : T if and only if [M] = [AT]. 

Proof. From left-to-right, this follows from the soundness of the theory =J in the bistable 
model of A J. 

To prove the converse, suppose [M] = [AT]. Then [inj M] G S n ( T ) S m ( T ) = [inj AT] G 
vjn(T) _^ yjm(T)^ n ence f or j < m(T), the terms Ax.7Tj((inj M) x) and Ax.7Tj((inj N) x) 
have the same head-normal form (i.e. Ax.T, Ax._L or Xx.iii x for some 1 < i < n(T)). Thus 
inj M =~]_ inj A" and so M =]_ proj (inj M) =j_ proj (inj N) =]_ N as required. □ 

3. Bistable bicpos 

We shall now extend our notion of bistable biorder with notions of completeness and 
continuity. 

Definition 3.1. Given < s -directed sets X, Y, we say that X J Y if for all x G X and 
y G Y there exists x' £ X and y' G Y such that x < s a/, y < S J/' and x' | y'. A bistable 
bicpo is a bistable biorder D such that (|-D|, < E ) is a cpo and if X J Y then |J AT | |J Y and 
U X A U Y = U{x A y | x G X A y G Y A x J y} 

Let £>,6C be the category of bistable bicpos and continuous and bistable functions. 

Proposition 3.2. (BBC,1, x) is Cartesian closed. 

Proof. We show that for any directed set F of functions from A to B, a bistable and 
continuous least upper bound can be defined pointwise — (|J F)(a) = \_\ F(a), where F(a) = 
{f(a)\f€F}. 

U F is bistable: if a % b, then we have F(a) | F(b) and hence (|J F)(a) I (\J F)(b), and 
(U F)(a V b) = U{/(a) V /(&) | / G F} (U F)(a) V (U F)(b) 

To show preservation of gibs, we note that |J{/( a ) A <?(&) | /, g G F A /(a) J 5(6)} = 
U{/( a ) A /(^) I / e F} by directedness of F (for any f,g such that f(a) J 5(6), we choose 
h such that f,g < E h and hence /(a) A 5(6) < £ h{a) A /i(6). Thus (|jF)(a) A (\J F )( b ) = 
|J{/(a) A 5 (6) I f,g £ F A /(a) J </(&)} = |J{/(a) A /(&) | / G F} = (|J F)(a A 6). 
Now given directed sets of bistable functions F, G such that F J G 
LJF| UG: For all x, F(x) I G(x), and hence (|JF)(x) | QJG)(x). Now suppose 
x I y — we need to show that (|JF)(x) A (LJ G )(j/) = (U^Xi/) A (U G )( X )- By 
symmetry it suffices to show (\JF)(x) A (|J G)(y) = |J{/( X ) A 9{v) | / G F A 5 G 
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G A f(x) t g(y)} < E (UF)(y). Given / G F and g G G such that f(x) | 5 (y), 
there exists /' G F and g' G G such that / < E f',g < E g' and /' J 5'. Hence 
/(x) A < £ f(x) A g'(y) < E f(y) and so f(x) J g(y) < E (|_|-F)(y) as required. 
UFAUG = U{/A 5 I /!<?}: For all x, (\JF A\JG)(x) = (U F)(x) A (|J = 
LK/OzO A I f ix) I g(x)} = U{/(x) A g(x) \ f I g}, since for any f,g such that 
/(x) I g{x) there exists /' G G G such that /' | </ and / < B /', 5 < B g' , and 
so/(x) Aj(i) < £ f'{x)Ag'{x). 

□ 

The bistable bicpos are also closed under the lifting and coproduct operations. 

3.1. SPCF. We have defined a cpo-enriched Cartesian closed category of sequential func- 
tionals, in which we may interpret PCF. We will now show that we have a fully abstract 
semantics of SPCF [6] — PCF with a non-local control operator — catch — and an "er- 
ror", T. Thus we may connect our bistable semantics of A J to the "original" observably 
sequential language, SPCF. In doing so, we establish indirectly the correspondence between 
observably sequential functionals and bistable functionals, since both yield fully abstract 
imodels of SPCF. In the case of the bistable model, our proof of universality for Aj gives 
an easy proof of full abstraction, since every SPCF type-object is a limit for a chain of Aj 
types. 

The types of SPCF are given by the following grammar: 

S,T ::= S I nat | S => T | S x T 

Terms are obtained by extending the simply-typed A-calculus with pairing and projection 
and the following constants: 

Divergence and Error: T,_L : S, 

Numerals: : nat, succ,pred : nat nat, 

Conditionals: IFO : nat (T x T) =>T, where T G {S,nat}, 

Fixpoints: Y : (T =>- T) T 

Control: catch n : (S n =4> S) =>• nat 
The control operator catch is a basic form of Cartwright and Felleisen's catch |6j; it sends 
z-strict functions (ith-projection) to i. Despite its simplicity, it can be used to derive 
(call-by-name versions of) control operators such as Felleisen's idealized call-with-current- 
continuation operator C : ((nat =4> S) X) nat |10j : 

C = YA/.Afif.((lFO (catch 2 Xx.g Ay. (IFO y) x)) (0, succ (/ Xh.g (Xz.h (predz))))) 

(So catch2 is sufficient to express catch n for any n.) 

We may give a simple operational semantics for SPCF programs — closed terms of type 
E — using evaluation contexts, 

Definition 3.3. Evaluation contexts of SPCF are given by the following grammar: 
E[-\ ::= [•] I E[-]M \ IFO E[-\ | ^ E[-] | succ.E[-] | pred£[-] 

The "small-step" operational semantics of SPCF programs is given in Table 1. The 
rule for catch makes its connection with control operators such as callcc apparent; the 
current continuation (represented as a tuple of evaluation contexts filled with the possible 
values for catch M) is passed as an argument to M. For a program M we write M 4 if 
M -» T. We adopt a standard definition of observational approximation and equivalence: 
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E[T] — > T 
E[(Xx.M) N] — > E[M[N/x]] 
E[k, (Mi,M 2 )] — > E[Mi] 
i?[pred (succ n)] — > E[n] 

£[IF0 0] — > E[tti] 
£[IF0 (succn)] — > E[tt 2 ] 
£[catch„ M] — ► M (E[0], ...E[n- 1]) 
£7[Y Af] — ► E[M (YM)] 

Table 1: "Small-step" operational semantics for SPCF programs. 

given terms M,N : T, Af < N if for all compatible program contexts C[-], C[M] JJ- implies 
C[N}^. 

3.2. The bistable model of SPCF. The ground type nat is interpreted as Nj, where 
N is the set of natural numbers with the trivial extensional and bistable orderings. We 
interpret catch n as the strict bistable function from E n => E to Nj which sends the ith 
projection to the value i. The interpretation of the remainder of the language (i.e. PCF) is 
standard, since BBC is a cpo-enriched Cartesian closed category. 

Proposition 3.4. Af JJ- if and only if [Af] = T. 

Proof. To show soundness, we need simply to verify that if M — > iV then [Af] = [iV]. This 
is standard for all the rules except those for T and catch. To establish these cases, we prove 
by induction that evaluation contexts are interpreted as strict maps — i.e. [^[T]] = T 
and [.E[_L]] = _L. Thus for any closed term M : T, n => E, if [Af] is constant, then 
[^[catchM]] = \M E[0], ... , E[n — 1])J, whilst if [Af] = vr^ then [M {E[0j, . . . , E[n - 1])] = 
= [E[catchM]] 

Adequacy is proved using a Tait-style computability predicate argument as for PCF 
[28]. □ 

We prove full abstraction by reduction to universality for A_j_. The key to doing this is 
the observation that for each i, the type T, 1 S is a definable retract of nat. 

For each n > 1 we have projection maps from Nj to S n => S sending i < n to the 
z + 1th projection, and i > n to 1. These are definable as n-ary case statements case n , 
where casei = Ax.At/.((IF0 x) (x,A-)), and 

case n+ i = \x. \y. (IF Ox) {ir 1 y, (case n (predx)) (vr 2 y)} 

Lemma 3.5. For each SPCF type S there is a sequence of Aj types {Si : i € to} with 
SPCF- definable retractions: injj : Si < S : projj such that ( IP r °jJ ' [' n Jil) = '^[Sl- 

Proof. We define Sj = E, natj = E* E (and so injj = catchj and projj = casej), 
(S x T)i = Si xTi, and (S=>T)i = Si =>Ti. □ 

Theorem 3.6. For all terms M,N, M < N if and only if [Af] < E {Nj. 

Proof. Inequational soundness follows from soundness and adequacy: if [Af] C [NJ, then 
for every context C[-], if C[Af] ^ then [C[M]] = T, by soundness, {C[M]j C [C[JV]] by 
compositionality, [C[iV]] = T, and so by adequacy C[N] JJ- as required. 
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We prove inequational completeness by induction on the type of M,N (closed), for 
which the base case is Proposition 13.41 For example, if M, N : S => T, and [M] ^ {NJ, then 
there exists e G \S} such that [Mj e % \N\ e. Moreover, since e = ([Uiewd^-'^j (P ro Ji x )]))( e )> 
by continuity there exists i such that [M]([Ax.injj (projj x)])(e) % [ATJQAx.inj^ (projj x)])(e) 

By definability for Aj_, there is a term L such that [L] = [projj(e), and hence \M (injj L)\ % 
\N (injj L)J. By induction hypothesis, there exists a context C[_] such that C[M (injj L)J J| 
and C[N (inj f L)J f and so M % N as required. □ 

4. Universality for a CPS Target Language 

We have given a direct interpretation of SPCF in the category of bistable bicpos and 
bistable and continuous functions, but this is in fact equivalent to a CPS (continuation- 
passing-style) interpretation (in the style of Streicher and Reus [31]). This may be described 
as a translation into a target language, AT (a;), which is an extension of A J with arithmetic 
and recursion (and which may also be used as a target calculus for CPS translation of 
call-by- value variants of SPCF). By proving universality for this calculus we show that it 
precisely captures the observably sequential functions over the given type-structure. 

Types of A J (a;) are generated from two ground types: a data type of natural number 
values and the program (or "response") type S. Programs of function type may take either 
data or programs as arguments, but must return a program — i.e. nat may not occur on 
the right of an arrow. Thus the types of our language are: 

T :: = N | S | P x P \ T P 

where P/N (we refer to non-N types as pointed). 

Terms are obtained by extending the simply-typed A-calculus (with products) with the 
following constants: 

Divergence and Error: _L, T : E, 

Zero test: IF0:N=^X=^X=^E, interpreted as the function sending to Xxy.x 
and n + 1 to Xxy.y. 

Fixpoints: Y : (P => P) => P, interpreted, in standard fashion, as IJiea; ^'(-L)) where 
F = Xf.Xg.g(fg). 

together with a set of basic arithmetic constants and unary and binary operations operations 
on N, including: 

• zero (0), 

• equality testing, _ = _, 

• "injective pairing" (_*_) and projections fst_ and sncL, such that n*m > 0, fst(n*m) = n 
and snd(ra * m) = t. 

• a unary operation (f>f for every total function / : N — > N, such that 4>f(n) = f(n). 

4.1. SPCF and Aj_(u). We may embed SPCF in A\_(u>) via a fragment of the call-by-name 
CPS interpretation, by representing the type N as (N =>■ S) S. The constants of SPCF 
may thus be expressed in AT (a;) as macros: 

• = Xx.x 

• succ = Xf.Xx.f Xn.x succ(n) 

• IFO = Xf.Xx.Xy.f Xn.((\F0n)x)y 

• catch n = Xf.Xx.f (x 0, ... x (n — 1)) 
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In fact, this yields an interpretation of SPCF in the category of bistable bicpos which is 
equivalent to the direct one, because the objects Nj and (N => E) => E are isomorphic. To 
show this, we extend our sequentiality result for bistable functions to those which take an 
argument of the form N =4> D. Noting that N => D = U^fqD, if D and E are pointed, we 
say that a function / : (N => D) => E is i-strict if g(i) = _L implies f(g) = _L and g(i) = T 
implies f(g) = T. 

Lemma 4.1. 7/^4 is pointed then every strict, continuous and bistable function f : (N =>- 
-A) =4* E is i-strict for some i. 

Proof. Given i <G N, a <G A, and e G N ^4, let e[a]« € N => A denote the function defined: 

• e[a]i(i) = j, 

• e[a]i(n) = e(n), if n ^ i. 

Then _L[T]j \ -L[T]j for all i, j, and so by continuity and bistability, /(T) = /(\/{±[T]j | i <G 
N}) = V{/(^t T ]i) I i G N}, and so /(_L[T]j) = T for some i, and e(i) = T implies 
T = /(±[T]i) < £ /(«)■ T W* I -J-Hi, and so /(T[±]0 A /(±[T]0 = /(T[!_], A 1_[T],) = 
/(!_) = J., and so /(T[±]i) = 1, and e(i) = ± implies /(e) < £ /(T[±]i) = J_. □ 

Hence the strict function from Nj to (N =4> E) =>- E sending ini(n) to Xf.fn is an 
isomorphism. 

Corollary 4.2. = (N S) E. 

So every SPCF type-object is isomorphic to the corresponding A~]_(oj) type-object. 
Moreoever, it is straightforward to show that the interpretation of SPCF constants fac- 
tors through this isomorphism and hence: 

Proposition 4.3. The direct and indirect interpretations of SPCF are equivalent. 

4.2. Universality for Aj_(uj). We shall now prove that every element of every Aj_(oj) type- 
object is expressible as a term, using definable retractions. 

Lemma 4.4. There are definable retractions from N=^N=^EfoN=>E and from 
(N => S) (N => E) S to (N E) S. 

Proof. Using the injective pairing operation, we have the embedding-projection pairs: 
(\f.Xx.(f fst(x) snd(x), Xg.Xx.Xy.g (x * y)) and 

(Xf.Xx.(f Xz.x (z * 0)) Az.x (2 * 1), Xg.Xx.Xy.g Xz.((\FQ snd(z)) (xfst(^))) (y fst(z))). □ 

Now let £/ be the type N =4> (N =4> E) =4> E. We will show that U is universal amongst 
the (pointed) type-objects of A]_(uj) — i.e. T < U for every pointed type - with a proof 
based on the the sequentiality of the model. 

Lemma 4.5. If f : U — > E is i-strict then for any h € U , f(h) = (hi) Xv.f (h[Xy.yv]i). 

Proof. If h(i) = _L, then f(h) = _L = (hi) Xv.(f(h[Xy.y v]i), and similarly if h(i) = T. 
Otherwise h(i) = Xp.pn for some n <G N. Then h[Xy.y n]i = h and so Xv.(f(h[Xy.y v]i) = 
f(h[Xy.yn]i) = f(h) as required. □ 
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Hence if / is z-strict and h(i)(k) = h(i)(k') for all k, k' G N => E, then f(h) = h(i)(±). 
Note that we may express h[a]i in A J (a;) as Ax.lFOx = i then a else (hx). 

Definition 4.6. Let inj : U S = 

YXF.Xf.Xxy.f Xa.Xb.(\FQ 3 then(y a) else ((F (Afc./ fe[Ap.pfet(a;)] a )) fet(o)) y 
and proj = Y\G.Xg.Xh.(g 0) Xu.((h u) Xv.(G Xw.g (v * w)) h. 

To prove that this defines a retraction, we require a bound on the number of times the 
fixpoint must be unwound to compute inj(/) for finitary / G U S. 

Definition 4.7. A function / : £7 — > £ is i-dependent if there exist g,h £ U such that 
= /i(j) for all j ^ i and /(g) 7^ /(&)■ We shall say that / has finite support if the set 
of i G N such that / is i-dependent is finite. 

Lemma 4.8. Every f : U =/- £ is the least upper bound of a chain of functions with finite 
support. 

Proof. For each g G U, define gi G U by gi(x) = g(x) if x < i and g(x) = _L, otherwise. 
Then f l :U — > S, defined / l (<7) = /(ft.) is continuous and bistable, and fc-dependent only 
for < i. By continuity, \J{f \ i £ = f ■ □ 

Lemma 4.9. Jf / /ias finitary support then inj(proj(/)) = /. 

Proof. By induction on the size of the set of n G N such that / is n-dependent. If / is not 
n-dependent for any n then it is constant, and so i nj (proj (/) ) = / by strictness of inj, proj. 

Suppose / is i-strict (hence z-dependent). Unfolding the fixpoint gives inj(/) = 
Xx.Xy.f Aa.A6.(IF0 x then(y a) else ((inj (Xk.f k[Xp.pht(x)] a )) fst(a)) y. 

Lemma l4~5l (on Aa.A6.(IF0 x then(y a) else ((inj (Xk.f k[Xp.pfst(x)] a )) fst(a)) y), gives inj(/)(0)(e) 
(ei) and inj(/)(m)(e) = ((inj(A/c./ k[Xy.y fst(m)]j)) fst(a)) e for m > 0. 

Hence proj (inj (f))(h) 
= ((hi)(Xv.(GXw.mi(f) (v*w))h) 
= ((h i) (Xv.(G Xw.\n](Xk.f k[ht(v * w)]i) snd(v * w)) h) 
= ((hi) (Xv .(proj Xw.(\n](Xk.f k[v]i))w) h) 
= (hi) (A«.(proj (inj(Afc./ k[v]i)))h). 

Observe that Xk.f k[v]i is n-dependent on strictly fewer n than /, since it is not i- 
dependent but if it is n-dependent for some n 7^ i then so is /. Hence by hypothesis 
proj(inj(AA;./ &[«]»)) = Xk.f k[v]i. So proj(inj(/))(/i) = h(i) Xv.(f(h[v]i) = f(h) by Lemma 
14.51 as required. □ 

Proposition 4.10. (inj, proj) form a definable retraction from U => £ to U . 

Proof. For each i, proj(inj(/*)) = /* by Lemma HT9l and so proj(inj(/)) = proj (i nj /*)) = 
U eN proj(inj(/*)) = U eN / 4 = /. ~ □ 

It is now straightforward to prove universality of U. 

Proposition 4.11. For each pointed type T there is a definable retraction from T to U 

u^u<u. 

Proof. By induction on the structure of T. For the induction step, suppose T = R =>■ S, 
then: 

T<£/^[/=SN^(N^£)^[/^£<N^(N^£)^C/ 
N^N^(N^£)^(N^£)^£<N^N^(N^£)^£ 

(N^£)^N^N^£<(N^£)^N^£^[/. □ 
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Lemma 4.12. The bistable semantics of A\_(lo) is universal at type U. 

Proof. Given / G N (N => E) => E, let / : N -» N be denned: 

. /(n) = 0, if /(n) = 1, 

. /(n) = 1, if f(n) = T, 

• f(n) = m + 2, if /(n) = in(m). 

Then / is definable as the term: 

Ax.Ay.IF0 4>f{x) then ± else (IFO pred(4>^(x)) then T else y (pred(pred(<^>y(a;))))). □ 

Hence by Lemma 12.131 we have shown the following. 
Proposition 4.13. The bistable semantics of AJ_(lo) is universal. 

4.3. Extending the Bistable Semantics. We may us bicpos to give (fully abstract) 
interpretations of functional programming languages with a variety of features of, including 
recursive types, call-by-value functions, and different control primitives. In general, these 
models follow the same lines as those based on epos and continuous functions. 

Sum Types: We may interpret sum types using either the coproduct, the "bilifted 
coproduct", A © B = (A + B)~]_, or a "bi-coalesced" sum identifying the T and _L 
elements of its components. Using the bilifted co-product, for example, we may 
construct a fully abstract model of SPCF extended with sums [13] • It is straight- 
forward to reduce full abstraction for this semantics to the case of the language 
without sums by using a definable retraction A © B <j nat x A x B. (The injection 
from A © B to nat x Ax B sends ini(e) to (0, e, _L) and in r (e) to (l,_L,e), and 
the projection from nat xAxB to A@B sends (0, d, e) to ini(d), (n + 1, d, e) to 
in r (e).) 

Recursive Types: We may interpret general recursive types using bistable variants 
of the standard techniques for determining colimits of w-chains of epos |29} 127]. For 
example, we may give an observably sequential version of Plotkin's FPC [UJ by 
adding recursive types to SPCF. We may prove full abstraction for the resulting 
semantics by showing that every type is the limit of a chain of SPCF types, as 
shown for unary FPC in [15j. 

Call-by-value: Our constructions generalize naturally to a call-by-value setting using 
standard techniques; for example, the strong monad (_)_[ meets the requirements 
for a model of Moggi's computational metalanguage |25j . 

Hence we can interpret a call- by- value version of SPCF with catch. A proof of full 
abstraction for this model using definable retractions is given in [20]. Alternatively, 
we may interpret call-by-value SPCF with control (i.e. callcc) at all types by CPS 
interpretation. 

Continuation-passing style interpretation: We have given a simple interpreta- 
tion of SPCF inside Aj(w): this corresponds to a special case of the call-by-name 
CPS interpretation of Streicher and Reus [31], in which (closed) terms M : T are 
interpreted as elements of [T] c E, where [T] c — the object of continuations of 
type T — is defined [nat] c = N => E and \S Tj c = ([5] c => E) x [T] c . 

In general (in call- by- value, or call-by-name with sum types), continuation-passing 
style interpretations will not be equivalent to those based on the lifting monad (the 
latter is equivalent to a linear CPS monad [H]). CPS interpretation yields models 
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with "higher-order" control (callcc at all types), whilst lifting yields models with 
"first-order control" (catch or callcc at ground type only). 

5. Bistable functions and Sequential Algorithms 

As we have already observed, sequential algorithms also provide a description of the 
fully abstract model of SPCF [7], and thus correspond to bistable functions. We shall now 
make this correspondence explicit, by showing that the set of sequential data algorithms on 
a sequential data structure forms a bistable bicpo, and that all bistable functions between 
such spaces of strategies are observably sequential, in that they are computed by a sequential 
algorithm on the corresponding function-space SDS. (Similar results have been described 
by Curien [9] and Streicher [30].) 

As observed in [211 I2]> sequential algorithms on sequential data structures may be 
represented as strategies on a game (of the basic form described in [1]). We adopt this 
presentation, capturing interactions which result in an error (T) as odd-length traces. 

A sequential data structure game A is specified by a triple (Ma, Xa, Pa), where Ma is 
a set of moves with a labelling function A^ : Ma — ► {P, O} which partitions Ma into sets 
of Player and Opponent moves. Pa Q M® is the set of plays of A, where M® is the set of 
sequences over A which are finite, alternating (i.e. P-moves are immediately preceded by 
O-moves and vice- versa), and contain at most one occurrence of each move and at least as 
many Opponent as Player moves. Key examples are the "empty game" (0, 0, {e}), and the 
game with one (Opponent) move o = ({o}, (o, O), {e, o}). 

Sequential algorithms, or Player strategies on A, are represented as sets of plays, using 
odd-length sequences to represent divergences. We write s Q E t for the partial order on 
sequences defined "s is an even-length prefix of t or s = t" . 

Definition 5.1. A sequential algorithm over a game A is a non-empty subset of Pa, subject 
to the conditions: 

• Even-prefix closure — if s Q E t E a, then s E a. 

• Even-branching — if s,t E a then sFlt Q E s,t. (So the only odd-length sequences in a 
are of maximal length.) 

We shall write strat(-A) for the set of strategies over A. Given a strategy a, we shall write 
E(a) for its set of even-length sequences (which is a strategy). 

So, for instance, there are two strategies over o, {e} and {e, o}. We shall now define an 
extensional order and bistable coherence making strat(-A) a bistable bicpo. 

Definition 5.2. We first define the extensional order on plays: 
s < E t if s is even- length and s C t, or t is odd-length and iCs. 

This is a partial order — to show antisymmetry, note that if s < E t and t < E s then 
s and t are either both even or both odd, and hence s = t. Thus we may define a partial 
order on strategies: a < E r if Vs G a.3t G t.s < e t. We establish that this is a partial order 
by proving antisymmetry. 

Lemma 5.3. If a < E r and r < E a, then a = r. 

Proof. We prove that s E a if and only if s E r by induction on length. For the induction 
case suppose sab E E(a). Then s E a and so s E r, and there exists t E r such that 
sab < E t. If sab C t then sab E r. Otherwise t is odd-length and t C sab. Then there exists 
t' E a such that t < E t' and so t' C t C sab. But this contradicts determinacy of a. □ 
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So in strat(o), for instance, we have {e} < E {e, o}. More generally, for each game 
there is a < s -least element _L — the empty strategy — and a < s -greatest element T, 
which contains every play consisting of at most one move. 

Definition 5.4. Two strategies are bistably coherent if they have the same non-divergent 
traces — i.e. a | r if E(a) = E(t). 

Lemma 5.5. For any game A, strat(yl) = (strat(^), < E , J) is a pointed bistable bicpo. 

Proof. If E(a) = E(r) then we may define a A r = a n r and cr V r = cr U r. These clearly 
satisfy the even-prefix-closure and even-branching conditions. 

It is straightforward to see that a U r is a least upper bound, since a, r C cr U r, and if 
cr, r < s p, then for all s G (T U t, either s G cr or s G r and we have r£/) such that s < E r. 

Similarly, a n r is a lower bound — a n r C cr, r. To show that it is a greatest lower 
bound, suppose p < E cr, r and r G p. Then there exist s € cr, t G r such that r < s s, i. If s 
is even-length, then s £ -E'(t) Caflr, If s is odd-length, then s C r and s,t € aUr and so 
s = tGcrnras required. 

We now prove completeness. For a directed set of strategies S C strat(yl), we define 
U S = {s € Pa I 3a(s) G 5.Vr G S.a(s) < E r s G r}. 

This is a well-defined strategy: if s,t G |J 5" then there exists r G S such that 
<r(s),cr(t) < s r and so s,t G r and are therefore even-branching. 

[J S 1 is an upper bound for S: We prove by induction on sequence length that if s G a G S 
then there exists t G |J S such that s < E t. Suppose there exists r G 5 with a < E r such 
that s G" r. Then there exists s' G r with s < s s', and s' must be a (proper) prefix of s so 
by hypothesis, there exists t G |J S with s < E s' < E t. 

\_\ S is a leasi upper bound: If cr < s r for all a G 5, then if s G |J S then s G <r(s) < E r, 
and so there exists t G r with s < E t. 

U preserves coherence: Suppose Z | Y, and s G E'(IJX). Then s G (Js(s), and there 
exists d' £ I,r £ 7 such that a < E a' and a' \ t. so s G cr' and s G r. If t' G Y and 
t < E t' then either s G r' or else there exists odd- length t G r' with its. But in the latter 
case, we may find cr",r" with cr' < s cr" and r' < E r" and cr" | r" and so s G r". Since 
there exists t' G r" with t < E t', this is a contradiction. 

The proof that (J preserves bistable gibs is similar. □ 

We shall say that a biorder arising as strat(A) for some sequential data structure is an 
SDS-biorder. 

5.1. Bistable Functions and observably sequential functions. We shall now show 
that bistable functions between spaces of sequential algorithms correspond to sequential 
algorithms on the corresponding "function-space" sequential data structure. We follow 
Lamarche [21] and Curien [8j in decomposing this into an affine function space A — o B, and 
a ! operator. 

Definition 5.6. The affine function-space A — o B is formed as follows. 

• M A ^ B = M_ A + M B , 

• ^A^B = \\a, As], 

• P A ^ B = {t£ M®^ B | t\A eAA t\B G B}. 
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We define the affine application of a : A — > B to r : A: 

t;ct = {t\B | t G a Nt\A G r} 

Lemma 5.7. For any sequential algorithm a : A —o B, the function from strat(-A) to 
strat(-B) sending r to r;o" is continuous and bistable. 

Proof. For monotonicity, suppose p : A < E r : A Then given r £ p;a, we have s G 0" such 
that s f-B = r and s\A E p. Hence there exists t G r such that sfA < s i. If s |~ A C i, 
then sfA is even-length and so sf-A G r and so r = s\B G r as required. If s\A % t, t is 
odd-length and t C sfA. Hence there exists s' Q E s such that s'fA = t, and s'|\B C s\B = r, 
and s'|\B is odd-length, so s\B < E s'\B as required. For continuity, suppose s G (|J5);(T. 
Then there exists t G A — o £? such that i|\B = s, and there exists r G S such that t < E t' 
implies tfA G r'. So r r' implies s G r' and hence s G Ul 17 ; r | cr G 5}. 

For bistability, we show that for all r : A, E{t;g) = E{E(t); a). Given t G E(r;a) 
there exists s G a such that s \ A G r and s |"B = t. But since s \ B is even-length, so 
are s and s|~A, and therefore s\B G E(E(r);a). Preservation of bistable lubs and gibs is 
straightforward. For example, if r | p then s G (r; a) U (p; cr) if and only if there exists t G cr 
such that ifi? = s and i|"A G p or t\A G r if and only if s G (p U r); a. □ 

We form the game !A as in [21] by using plays of A as moves of \A. For a sequence s 
of such moves, let |s| = {p £ P A \ Bt.tp Q E s}. 

Definition 5.8. From a game A, we define a game \A as follows: 
. M !A = P A - {e}, 

• Au(sa) = \a(o), 

• p !A = { S £ M,® [ Vt C G strat(A)}. 

We define the promotion of a strategy o~ : A to a strategy cr^ :IA: 
O-t = {s G Pia | |s| B C cr}. 

Lemma 5.9. The function sending a to a* is continuous and bistable. 
Proof. 

Monotonicity: We prove by induction on the length of s that if s G o~f then there 
exists t G rt such that s < E t. For the induction case, suppose s = s'(pa) or 
s = s'(pa)(pab), where s' is even-length. Then by hypothesis there exists t' G r^ 
such that s' < E t' . If t' is odd-length then t' C s' C s and we are done. If i' is 
even-length, then s' C i' and so s' G r T . If s = s'(pa) then since pa G cr, there 
must exist a G r with g < s pa — i.e. q is odd-length and q C pa. Since p G r 
by even-prefix closure, c; cannot be a proper prefix of pa and so g = pa, and so 
s = s'{pa) G rT. Similarly, if s = s'(pa)(pab), then either pah G r — and so s G r^ 
— or else pa £ t and so s < s s'{pa) G r T . 

Continuity: Given a directed set of strategies S, suppose s G (\_\S) We prove by 
induction on the length of s that s G |_|{°^ I c G 5}. Suppose s = s'(pa). Then by 
hypothesis there exists a G 5 such that s' G <r T and cr < s r implies s' G to?A Since 
l s l" B — U ^> there exists p £ S such that p < s r implies pa G r. So there exists 9 
such that cr, p < s and so < s r implies s' G r^ and pa G r and so s'(pa) G r' . 

Bistability: Note that if s G is even-length then \s\ E = E(\s\ E ). Hence E(a)^ = 
E{p*), and so if E(p) = E(t) then E(a^) = E{t^). Moreover <jt n r* = {s G 
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P\A | \s\ E C aA\s\ E C r} = cr f fir 1 " and a 1 " Ur 1 " = {s E P !A | Is)- 5 C V A \s\ E C t} = 

□ 

We define the application of a strategy cr : A B to a strategy cr : B by combining 
the promotion and affine application operations: a ■ r = r^;cr (or directly, cr • r = {s \ 
B | s € a A IsflA^ C t}). We define an observably sequential function between sequential 
data structures A and B to be a function / : strat(-A) — > strat(-B) which is "realized" by a 
sequential algorithm 07 : j4 =>■ 5 — i.e. /(t) = at -t. By Lemmas I5.7I and I5.91 we have 
shown the following. 

Proposition 5.10. Every observably sequential function is continuous and bistable. 

We shall now show that every strategy on A B corresponds to a continuous and 
bistable function from strat(-A) to strat(-B). To do so, we observe that bistable functions 
are stable with respect to the inclusion order — i.e. continuous with respect to C, and 
conditionally multiplicative (if a, a' C t then /(cr n a') = f(a) n /(a')). 

Proposition 5.11. Every bistable and continuous function of SDS-biorders is stable. 

Proof. Suppose cr, r C p. Let a' = (crflr) U {pa € P4 j p G B^flr) A 3q G cr.pa C q Ag ^ r}, 
and r' = (<7 n r) U {pa G P4 | 3q G r.pa C q A q a}. 

Then a < E a' (if s G a then either s G cr n r C a', or else s'a G a', where s'a is the 
maximal prefix of s such that s' G (Tflr) and similarly r < s r'. Moreover cr' J r' and 
a' n r' = cr n r, and so /(<r fir) = /(a) n /(r) < B /(a') n /(r') = f{a' n r') = /(a n r) < E 
/(<r) n /(r) as required. 

Hence / is also monotone with respect to C, and moreover continuous because every 
C-directed set is < s -directed. 

□ 

Thus each continuous and bistable function / : strat(A) — > strat(-B) has a trace: tr(/) C 
strat(A) x P B = {(a,t) \ t G /(cr) A Vr.(cr | r A t G /(r) =^> a C r)}. We define a 
sequential algorithm cr/ : ^4 P for computing / by "sequentializing" this trace: cr/ = 
{s G Pa^b I Vt E £ a.(|tr!A| E ,trS) G tr(/)}. 

Lemma 5.12. cr/ is a well-defined strategy on A^> B. 

Proof, cr/ is even-prefix-closed by definition. To prove that it is even-branching, suppose 
sab, sac G cr/. We show that b = c. 

• If 6 and c are both moves in B then sab\B, sac\C G /(|saf!A| E ) and so b = c. 

• If b is a move in \A and c is a move in B (or vice- versa), then b is an odd- length sequence 
on A and so Isac-fL^ = \sa\ E U{b} J (safl^ = \sac\\A\ E . Hence /(|sa6r^| S ) I /0«4 
\A\ E ) and so sacfP = (sa\B)c G /(|sao|~!A| ) since it is even-length. But this contradicts 
the assumption that the (odd- length) sab\B = sa\B G f(\sab\\A\ E ). 

• If b and c are both (Opponent) moves in A, then if b ^ c then Isa^l-A^ J (sacf!^^ and 
|sa&fL4| B A IsactlAI^ = \sa\\A\ E . Thus safP G /(IsabfLAp) A f(\sac\\A\ E ) = f(\sab\ 
\A\ E ) A \sac\\A\ E ) = f{\sa\\A\ E ). But by definition of a f , (\sab \IA\ E , sab \B) G tr(/), 
which is a contradiction. 

We show that if s G cr/ is odd-length, then there is no extension of s in cr/ by the same 
argument. □ 
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We now show that the sequential algorithm Uf does indeed compute /, based on the 
following lemmas. 

Lemma 5.13. Suppose (r,tab) G tr(/) or (t, ta) G ti(f), where t is even-length, and 
cr C E{t) is such that t G /(cr). Then there exists a unique sequentiality index seq(cr) for 
f at (cr, t) — an even-length sequence pc G r — a such that ta G f(a U {p}). 

Proof. Suppose (r,tab) G tr(/) (the case (t, ta) G tr(/) is similar). In this case r = E(t) 
by bistability. Let a' = cr U {pc G Pa \ P G cr A Bd.pcd G r}. We have f(a) J f(o~') and so 
t G f{o~'). Moreover, r < E a', and so /(t) < s /(cr'). Hence there exists r G /(<r') such that 
ta£> < E r. If tab C r then tac- G /(cr')- But then G /(cr), since cr J a', which contradicts 
C-minimality of r. So r C ta& is odd-length, and since t G /(cr'), this entails r = ta. Since 
a' = \/{o- U {pc} | p G cr A Bd.pcd G r}, by bistability there exists a unique pcd G r such 
that tc G /(cr U {pc}). □ 

Given (r, tab) G tr(/) or (r, ta) G tr(/), where t is even- length, we define a (finite) chain 
of strategies cro C . . . a n C r: 

• Cr = D{P C T | i G f( P )}. 

• If (Tj 7^ ^(t), then we define crj + i = dj U seq(crj). 

Lemma 5.14. // p C E(t), t G /(p) and seq(p) = pc, t/ien (pU {p},ta) G tr(/) if and only 
if p = o~i for some i. 

Proof. Suppose (p U {p},ta) G tr(/). Since there exists n such that a n = E(t), there must 
be some i such that seq(<7j) = pc. Then seq^ U {p} and p U {p} are stably coherent, and so 
tc G f{p n <Tj U {p}). But since (p U {p}, ta) G tr(/), we have p = Oi as required. 

We prove the converse by induction on the size of p. Suppose p = ai, but there exists 
9 C p U {p} with (9,ta) G tr(/). Then t G f(9 — {p}) (by bistability), and so by induction 
hypothesis 9 — {p} = Oj for some j < i. But then pc is the sequentiality index for aj, and 
so pc G crj, which is a contradiction. □ 

Proposition 5.15. If (r, tab) G tr(/) or (r, ta) G tr(/), where t is even-length, then either 
(E(r),t) G tr(/) or else there exists (a unique) pcd G E(t) such that ((E(t) — {pcd} U 
\pc},ta) G tr(/). 

Proof. If (r, t) g" tr(/) then since there exists n such that a n = r cr n+1 = cr n U {seq(crj)} = 
E(t), we may take pcd = seq(crj) as required. □ 

We may now show how to sequentialize each element of tr(/). 

Lemma 5.16. Let f : strat(A) — > strat(-B) be a continuous bistable function. Then for any 
(r, t) G tr(/), there exists a sequence r^t G cr/ such that \rit\\A\ E = r and T^t\B = t. 

Proof. By induction on the total lengths of the sequences in r U {t}. 

If t is even-length and non-empty — i.e. t = t'ab — then r = E(t) by bistability and 
by Proposition 15.151 either (r, t') G tr(/) — and so we may define r^t = (T^t')ab — or 
there exists pcd G r such that ((r — {pcd} U {pc},ta) G tr(/) — and so we may define 
Tit = (((t - {pcd} U {pc})ita)(pcd)6. 

Similarly, if t is odd-length i.e. t = t'a — then if r = E(t), by Proposition 15.151 either 
(r, t') G tr(/) — and so we may define r^t = (rjt')ab — or there exists pcd G r such that 
((r — {pcd} U {pc}, ta) G tr(/) — and so we may define r^t = (((r — {pcd} U {pc})j_ta)(pcd). 
Otherwise r contains an odd-length sequence q. By minimality of r with respect to C, and 
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bistability of /, q is unique. By Proposition ^. 15} either (E{r),t') G tr(/) — so we may define 
r£t = {E{r)fi_t')qa — or there exists pcd € E(t) such that ((E(t) — {pcd} U {pc}, ta) G tr(/) 



Thus we have shown that every bistable and continuous function / : strat(A) — > 
strat(-B) is observably sequential (and hence given an alternaative proof that observably 
sequential functions may be composed). 

Proposition 5.17. The SDS-biorders and observably sequential functions form a full sub- 
category of BBC. 



Research into bidomain models of sequential programming languages is ongoing, and 
includes the following themes: 

Elimination of nesting in SPCF: In [16|.I20| we use the full abstract bicpo model of 
SPCF to show that nested and recursive function calls in SPCF may be eliminated: 
every SPCF term is observationally equivalent to one typable in an affine typing 
system which does not permit nesting. The proof is based on the universality of 
the type of first-oder functions: we show that all retractions into this type may be 
defined in our affine system. Since every first-order function is definable without 
nesting, we show that every SPCF-definable element of the model is definable in 
affine SPCF. 

Locally Boolean Domains: We have shown that the category of sequential algo- 
rithms and sequential data structures can be fully embedded in the category of 
bistable bicpos and bistable and continuous functions. This leaves open the ques- 
tion of how the correspondence works in the opposite direction; what is the image of 
the embedding, and given an object in that image, can we construct the correspond- 
ing sequential data structures? Furthermore, is there a "linear decomposition" of 
bistable bidomains into a model of linear logic, which corresponds to that for se- 
quential algorithms [21\ [8] ? In [T7] we answer these qestions by describing a notion 
of "locally boolean" domain — a partial order (the extensional order) with an in- 
volutive negation, which can be used to give simple definitions of the stable and 
bistable orders. Our fundamental representation result for these domains is that 
they can all be generated (up to isomorphism) by taking products and co-products, 
lifting, and limits of w-chains. Hence, in particular, locally boolean domains may be 
viewed as games in which one player chooses indices in the product, and the other 
in the lifted sum. 

Semantics of imperative effects: Locally boolean domains form a model of linear 
type theory equivalent to the simple games and strategies (or affine sequential algo- 
rithms) model described by Lamarche |21tl8]. A more general "linear decomposion" 
of bistable functions is still under investigation. A next step is to extend our seman- 
tics beyond functional languages with control to include imperative features, non- 
determinism and concurrency, inspired by games models of functional-imperative 
languages such as Idealized Algol. The key to constructing such models is the iden- 
tification of categorical structures shared by games and bistable models, and used 
to capture subtle intensional properties of such languages [13]. This in turn may 
lead to higher-order principles for reasoning about them. 




□ 



6. Further Directions 
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In another direction, we may obtain a semantics of fresh name generation in a 
category of "FM-biorders" — bistable biorders acted upon by the topological group 
of natural number automorphisms. This fits with a a natural CPS interpretation of 
fresh name generation given by Shinwell and Pitts to give a sequential model of a 
"CPS-nu-calculus". 

Other Bidomain Models: Bistable bidomains share many properties with Berry's 
original (stable) bidomains [2]. This captures a different but related notion of non- 
deterministic observable sequentiality, as shown by may-nand-must full abstraction 
results for a version of AT (a;) with countable non-determinism [19] (as well as fully 
abstract models of languages such as the lazy A-calculus [IB]). This poses the 
question of whether there is a general notion of bidomain embracing both stable and 
bistable instances, and other phenomena such as probabilistic non-determinism. 
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